CVE-2026-129092

The CCC Attestation SIG attested-tls-poc (through commit 731ca82) contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability. The root cause is that Evidence is appraised only once during the TLS handshake without post-handshake re-attestation. This allows an attacker with local access to the at...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

CVE-2026-98939

A flaw was found in the Linux kernel's x86 memory management subsystem. Under memory pressure on systems with discrete graphics processing units GPUs, a circular locking dependency can occur between memory reclamation and page table freeing routines. A local user could exploit this flaw to cause ...

PT-2026-106366

Name of the Vulnerable Software and Affected Versions AMD ROCm Communication Collectives Library RCCL versions prior to 7.14 Description Improper input validation in the ROCm Communication Collectives Library RCCL allows a compromised peer rank or network-adjacent attacker to dereference an...

Astra Linux – vulnerability in Chromium

Prior to version 151.0.7922.109, using “After Free” in GPUs within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a specially crafted HTML page. Chromium security severity: High...

Towards TEE-Certified DP: Verifiable Differentially Private Training on Legacy GPUs

Wide adoption of machine learning has created growing policy and regulatory demand for protecting sensitive training data, with differential privacy DP emerging as a key mechanism. Yet a less-studied problem is how to certify the faithful execution of DP during training: an external verifier shou...

PT-2026-94935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/mes component where a loop limit for hung queue db array was incorrectly set to only AMDGPU MAX MES PIPES iterations. On multi-XCC X-Complexity Cluster...

GPUThor: Amplifying Rowhammer Attacks Via Non-Uniform Patterns to Exploit ECC-Protected GPUs

GDDR memory in GPUs is vulnerable to Rowhammer attacks, where rapid memory accesses induce bit flips in adjacent cells, enabling data tampering and privilege escalation. However, prior GPU Rowhammer attacks trigger only tens to hundreds of bit flips, orders of magnitude fewer than CPU attacks,...

CVE-2026-49269

Apple M1 GPUs retain register file data between compute shader dispatches from different processes. A sandboxed Metal attacker app can run a GPU reader shader that reads stale register values left by a separate sandboxed victim app. In the proof of concept, GPUVictim.app generates a fresh random...

CVE-2026-49269: Exposure of Sensitive Information to an Unauthorized Actor

Apple M1 GPUs retain register file data between compute shader dispatches from different processes. A sandboxed Metal attacker app can run a GPU reader shader that reads stale register values left by a separate sandboxed victim app. In the proof of concept, GPUVictim.app generates a fresh random...

UBUNTU-CVE-2026-43318

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix sync handling in amdgpudmabufmovenotify Invalidating a dmabuf will impact other users of the shared BO. In the scenario where process A moves the BO, it needs to inform process B about the move and process B will...

Rowhammer Attack Against NVIDIA Chips

A new rowhammer attack gives complete control of NVIDIA CPUs. On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards from Nvidia’s Ampere generation that take GPU rowhammering into new--­and potentially much more consequential--­territory: GDD...

CVE-2026-23264

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 "drm/amd: Refactor amdgpuaspm to be...

How Harmonic Proved High-Performance AI Inference on Akamai GPUs

Find out how Harmonic achieved high-performance AI inference on Akamai Cloud with NVIDIA Blackwell GPUs, optimizing for speed and efficiency...

PT-2026-26124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an issue where a reverted commit related to AMD GPU ASPM Active State Power Management was erroneously reapplied. This reapplication, following a refactoring o...

CVE-2025-32091: Incorrect Default Permissions

Incorrect default permissions in some firmware for the IntelR ArcTM B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

cuobjdump DoS

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA Toolkit graphics processors is related to pointer dereferencing. Exploiting this vulnerability can allow an attacker to cause a system failure...

EUVD-2011-3612

Malware in sbrugna...

Intel Graphics Drivers Null Pointer Dereference Vulnerability

Intel Graphics Drivers is Intel's official driver for users of Arc series graphics cards, Iris Xe graphics cards and Core Ultra processors with Arc GPUs. A null pointer dereference vulnerability exists in Intel Graphics Drivers, which can be exploited by an attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2025-21989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix missing .istwopixelspercontainer Starting from 6.11, AMDGPU driver, whi...